ded/cpp-httplib
1
0
Fork 0
mirror of https://github.com/yhirose/cpp-httplib.git synced 2026-08-12 05:11:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

OSS-Fuzz: Add new fuzzer targets multipart parsing (#2473)

Browse Source 
* OSS-Fuzz: Add new fuzzer targets multipart parsing

Signed-off-by: Arthur Chan <arthur.chan@adalogics.com>

* Fix formatting

Signed-off-by: Arthur Chan <arthur.chan@adalogics.com>

---------

Signed-off-by: Arthur Chan <arthur.chan@adalogics.com>
This commit is contained in:
Arthur Chan
2026-06-14 03:39:45 +01:00
committed by GitHub
parent 28d95937b5
commit df0b7d243b
2 changed files with 41 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
test/fuzzing/Makefile
View File

@@ -13,7 +13,7 @@ ZLIB_SUPPORT = -DCPPHTTPLIB_ZLIB_SUPPORT -lz
BROTLI_DIR = /usr/local/opt/brotli
# BROTLI_SUPPORT = -DCPPHTTPLIB_BROTLI_SUPPORT -I$(BROTLI_DIR)/include -L$(BROTLI_DIR)/lib -lbrotlicommon -lbrotlienc -lbrotlidec
FUZZERS = server_fuzzer url_parser_fuzzer header_parser_fuzzer client_fuzzer
FUZZERS = server_fuzzer url_parser_fuzzer header_parser_fuzzer client_fuzzer multipart_parser_fuzzer
# Runs all the tests and also fuzz tests against seed corpus.
all : $(FUZZERS)
@@ -35,5 +35,8 @@ header_parser_fuzzer : header_parser_fuzzer.cc ../../httplib.h
url_parser_fuzzer : url_parser_fuzzer.cc ../../httplib.h
$(CXX) $(CXXFLAGS) -o $@ $< $(ZLIB_SUPPORT) $(LIB_FUZZING_ENGINE) -pthread -lanl
multipart_parser_fuzzer : multipart_parser_fuzzer.cc ../../httplib.h
$(CXX) $(CXXFLAGS) -o $@ $< $(ZLIB_SUPPORT) $(LIB_FUZZING_ENGINE) -pthread -lanl
clean:
rm -f server_fuzzer pem *.0 *.o *.1 *.srl *.zip

37
test/fuzzing/multipart_parser_fuzzer.cc Normal file
View File

@@ -0,0 +1,37 @@
#include <cstdint>
#include <string>
#include <httplib.h>
extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) {
if (size < 2 || size > 65536) return 0;
// First byte selects the boundary length, the rest is the boundary then body
size_t boundary_len = (static_cast<size_t>(data[0]) % 16) + 1;
if (boundary_len + 1 >= size) boundary_len = 0;
std::string boundary =
boundary_len > 0
? std::string(reinterpret_cast<const char *>(data + 1), boundary_len)
: "----fuzzboundary";
const uint8_t *body = data + 1 + boundary_len;
size_t body_size = size - 1 - boundary_len;
// FormDataParser::parse, fed in chunks to exercise the streaming paths
httplib::detail::FormDataParser parser;
parser.set_boundary(std::move(boundary));
auto header_cb = [](const httplib::FormData &) -> bool { return true; };
auto content_cb = [](const char *, size_t) -> bool { return true; };
size_t chunk = (static_cast<size_t>(data[1]) % 64) + 1;
for (size_t off = 0; off < body_size; off += chunk) {
size_t n = (off + chunk > body_size) ? body_size - off : chunk;
if (!parser.parse(reinterpret_cast<const char *>(body + off), n, header_cb,
content_cb))
break;
}
return 0;
}